Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: YVEOLBFd0t0I/44B1wm/GKcUY6EfFKiuwuaZn0X71xo=
Subject key identifier: 29:6A:0B:45:94:6C:61:4D:22:DD:0C:3D:DF:FF:B2:06:B4:5A:47:8A
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 019675671C09EF781305FD055BEAADA34768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0AFA
Signing time: Sun 27 Apr 2025 04:00:13 +0000
Manifest this update: Sun 27 Apr 2025 04:00:13 +0000
Manifest next update: Mon 28 Apr 2025 04:00:13 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: uThvh39zpgg+pFem2M42vb4U44SVrnsfTsKK+dfR45w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:1c:09:ef:78:13:05:fd:05:5b:ea:ad:a3:47:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Apr 27 04:00:13 2025 GMT
Not After : Apr 28 04:00:13 2025 GMT
Subject: CN=296a0b45946c614d22dd0c3ddfffb206b45a478a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:59:df:3f:90:5f:da:f4:74:6f:d4:c1:e4:
26:ae:b5:e5:c9:c2:c0:57:aa:0c:ff:b4:bd:11:d8:
a3:2c:53:74:06:48:f1:0b:7d:04:96:7b:0d:e7:94:
aa:53:41:7b:20:d0:08:b8:cb:c6:17:2e:3a:e1:d7:
7d:09:60:12:f3:de:8f:51:ab:0f:89:e5:7b:ca:f9:
ba:1f:3a:49:44:64:22:b1:f9:d8:68:7c:4a:82:d6:
8d:d7:63:28:25:9d:9f:64:fd:0a:cc:e2:89:85:01:
44:24:e6:e5:5e:24:14:cf:ee:3d:8f:f3:57:56:16:
a8:d3:5b:37:00:cc:44:74:c0:38:38:d4:28:ce:d4:
99:94:df:ca:bc:a1:59:f0:e8:92:46:88:bc:f8:19:
93:7c:3e:48:d4:71:ad:3c:aa:0e:79:c5:82:fa:9a:
7d:fa:07:8a:79:d3:e8:d2:07:46:25:79:64:66:ae:
f2:7b:86:3f:ae:06:e0:4c:7d:7f:67:7d:5d:30:bf:
6a:34:0c:0a:65:2e:ff:a5:91:ac:49:45:f9:12:60:
8c:7c:39:f9:94:c0:be:ac:9d:c6:32:e9:53:c8:1b:
8d:b5:62:3c:de:e4:c1:36:66:57:fa:09:fb:e4:fb:
7b:a4:9d:74:d4:23:08:78:48:fc:36:ce:dd:bb:00:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:0B:45:94:6C:61:4D:22:DD:0C:3D:DF:FF:B2:06:B4:5A:47:8A
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:5d:1e:89:36:2b:3b:5d:cd:30:48:43:58:b4:0f:f2:c7:
83:f3:bb:ba:4e:bd:97:6b:f8:af:39:c5:7f:75:c5:6c:5f:f5:
cd:cd:13:27:5f:1e:97:56:d7:e6:51:77:45:fb:62:c4:73:0d:
6e:9c:93:92:f2:91:18:f4:4e:10:52:a1:0e:48:19:f2:e0:14:
cb:5a:5b:61:d4:4b:41:6d:ff:13:0e:81:6e:76:e3:e2:d4:62:
53:41:71:0d:f4:f3:98:b5:46:e8:18:7b:50:e8:88:5b:44:2f:
3f:59:2c:0f:8e:0b:86:fb:9f:78:fc:47:db:31:33:cd:97:77:
dd:be:d0:81:1d:43:60:13:ee:39:15:75:67:e4:32:a7:9e:f4:
77:28:07:bf:65:d6:97:3e:bc:22:d5:ab:22:2c:76:ff:59:71:
e6:be:d3:db:61:8b:03:8f:76:90:3a:04:16:9e:42:3f:fb:29:
f6:cd:bd:9e:16:36:10:09:28:1f:db:3f:ba:96:3d:81:b7:63:
f0:fc:b7:af:19:8c:13:ce:bc:43:a6:3b:12:dc:30:ca:18:56:
38:12:d0:7e:bb:27:5d:23:c1:55:b8:c8:4f:28:55:24:26:0e:
6e:62:eb:7c:8c:85:0f:6d:cc:5a:b7:9e:9b:a9:c0:78:0f:ca:
c4:81:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:01 2025 by rpki-client